瀏覽代碼

[IMAPSYNC] Hardened pipemess exploit prevention (pipemes)

DerLinkman 3 年之前
父節點
當前提交
b1658c0f83
共有 1 個文件被更改,包括 2 次插入2 次删除
  1. 2 2
      data/web/inc/functions.mailbox.inc.php

+ 2 - 2
data/web/inc/functions.mailbox.inc.php

@@ -337,7 +337,7 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
           $enc1                 = $_data['enc1'];
           $enc1                 = $_data['enc1'];
           $custom_params        = (empty(trim($_data['custom_params']))) ? '' : trim($_data['custom_params']);
           $custom_params        = (empty(trim($_data['custom_params']))) ? '' : trim($_data['custom_params']);
           // Workaround, fixme
           // Workaround, fixme
-          if (stripos($custom_params, 'pipemess')) {
+          if (stripos($custom_params, 'pipemess') || stripos($custom_params, 'pipemes')) {
             $custom_params = '';
             $custom_params = '';
           }
           }
           if (empty($subfolder2)) {
           if (empty($subfolder2)) {
@@ -1746,7 +1746,7 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
               );
               );
               continue;
               continue;
             }
             }
-            if (stripos($custom_params, 'pipemess')) {
+            if (stripos($custom_params, 'pipemess') || stripos($custom_params, 'pipemes')) {
               $custom_params = '';
               $custom_params = '';
             }
             }
             if (empty($subfolder2)) {
             if (empty($subfolder2)) {